CORS Preflight

src/index.ts

@@ -2,6 +2,7 @@ import { createResponse } from './utils';
 import handleStudioRequest from "./studio";
 import { Handler } from "./handler";
 import { DatabaseStub, DataSource, RegionLocationHint, Source } from './types';
+import { corsPreflight } from './cors';
 export { DatabaseDurableObject } from './do'; 
 
 const DURABLE_OBJECT_ID = 'sql-durable-object';
@@ -52,6 +53,9 @@ export default {
             const pathname = url.pathname;
             const isWebSocket = request.headers.get("Upgrade") === "websocket";
 
+            // Authorize the request with CORS rules before proceeding.
+            corsPreflight(request);
+
             /**
              * If the request is a GET request to the /studio endpoint, we can handle the request
              * directly in the Worker to avoid the need to deploy a separate Worker for the Studio.
@@ -105,8 +109,7 @@ export default {
                 }
             };
 
-            const response = await new Handler().handle(request, dataSource, env);
-            return response;
+            return await new Handler().handle(request, dataSource, env);
         } catch (error) {
             // Return error response to client
             return createResponse(

src/utils.ts

@@ -1,3 +1,5 @@
+import { corsHeaders } from "./cors";
+
 export type QueryTransactionRequest = {
     transaction?: QueryRequest[];
 }
@@ -21,6 +23,7 @@ export function createJSONResponse(data: ServerResponse): Response {
         status: data.status,
         headers: {
             'Content-Type': 'application/json',
+            ...corsHeaders
         },
     });
 }
@@ -32,7 +35,3 @@ export function createResponse(result: any, error: string | undefined, status: n
         status,
     });
 };
-
-export function createResponseFromOperationResponse(response: { result?: any, error?: string | undefined, status: number }): Response {
-    return createResponse(response.result, response.error, response.status);
-}